all which had no effect on stopping internal messages from being quarantined.

For the interim I've changed in (Forefront's General Settings) the Realtime Scan Timeout Action parameter and have set it to Skip: detect only to at least allow for mail to flow.
I'm a bit uncomfortable with leaving this setting on.

Has anyone experienced this before? I'm not too sure on how to resolve this issue, any advice would be greatly appreciated.